VULNERABILITY INTELLIGENCE

CVE-2017-10140

CVSS score7.8 HIGH

EPSS probability0.55%

CISA KEVNot currently listed

Published2018-04-16

Last modified2026-06-17

Description

Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.